fingerprint-nextjs
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill correctly separates client-side and server-side environment variables, ensuring that sensitive API keys are never leaked to the browser bundle by omitting the NEXT_PUBLIC_ prefix.
- [SAFE]: Server-side verification logic implements essential security controls, including replay protection (timestamp and replayed flag validation) and confidence score thresholds (0.9 minimum).
- [SAFE]: The skill leverages official, trusted SDKs from the vendor (@fingerprint/react and @fingerprint/node-sdk) and refers to official documentation and OpenAPI schemas.
- [SAFE]: No malicious patterns, obfuscation, or unauthorized network operations were identified within the instructions or code snippets.
Audit Metadata